Expand description
Credential retrieval for Claude Code OAuth tokens.
This module provides platform-specific credential retrieval:
- macOS: Reads from Keychain
- Linux: Reads from
~/.claude/.credentials.json
§Security
Tokens are retrieved, used immediately, and discarded. They are never:
- Logged
- Stored in memory longer than necessary
- Passed to other modules
Constants§
- ENV_
VAR_ TOKEN - Environment variable that can override file-based credentials.
- KEYCHAIN_
SERVICE - Service name used by Claude Code in macOS Keychain.
- LINUX_
CREDENTIALS_ PATH - Path to credentials file on Linux (relative to HOME).
Functions§
- get_
token - Retrieve the OAuth access token from platform-specific storage.